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[0. 5 + n] ^Py^W^ nficmi; 
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[0001] 
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ffi»f * f4S*&ic J; 5 t % 5 Aa ttfftom #11© 
Lt r — 9 i&.McWk *) §r£ C 5 r t ri* fe 2> „ 
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[0 0 0 4] Mx.fi. ra^Lfc^niryf-lrlSl— 
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TFault Tolerance Achieved in VLSI] "Cijg^ & jft/CV 
•5 TFunctional redundancy checking] (Cf4 N -7^9 ' 
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^ • 7°P-ir5/f-(Dif|#^ p y;5\ ^Py^Bfi^cty* 

[0011] IS]® ( a ) [C^-f- <fc ?\C S 9 Xi y 9 At 9 
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[0 0 2 5] BffiaJttSegfittx SuIE-v^^ • 7°n-feyf- 
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LfcT** • An^y^o^tA*-^ 
-f~3S?l i/A;*^ A iEfiy^'^Ptyf/^^ 
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[0 0 2 7] 

mmnmi] nt, #B?>!<7)^ii£7§fiiscj;5=<>- 

bfa— ^^•rA(7)1ft^;|2|Sr*-fo A^^t"^ — A^ 20 
TAii v ^©fcJM&aSrfT?"^** • Aniryf-1 o 
tiiWaiy* • ^Btyf2 0 A AtJtJ^gfi8 0, 
9 0 50t, ^r^.^ • 7°nir j/iM OAAft 

7J8E8 0, 9 0^^*1)5 0^7^^, W, 
t** • /ptyfl 0^^6>Atil^lSg8 0, 9 0— CO 

Tv^^Mn-tzftymn^-y v (mcu) 40 

-x'^^ • 7Ptyfl 0CDt±}7jiAiy# • Anir 
O©ft#&JfctSEL"C»0 ^ftASJttiSg 3 0 
A Aft7t/gg8 0, 9 0^Sgf5^ri>AX7 0 
A y< * y frJW^ y M 0 i^TV^7 OSrgfl 30 

[0 0 2 8] £biA ^"PtyflO, 2 0fcJfc|fcgg 
3 OKfxiyf&Wfcr&rriyfgMl 00 A An 
tytlO, 2 0£A-fey hA5 y-fey h|£g2 0 0£ 
f U • Aniryf-l 0iltg^B3 0fiCPU 

1 5fCj;i9g§G£tU fxy* • 7°n-fey-+2 0 t 
it$igg3 0ttCPU/^2 5fCj;(9g^£A, ttKg 
S3 0 t^^Dfflll^y h4 0tiCPU/^3 5 fcj; 
•JSMBSft-O^,, 40 

[0 0 2 9] UT, ^SUfe^llCiSaVfa.— ^V^T" 

Aniryf-1 0 tJtKSB3 0 t y-fey h|£g2 0 OfC 
?P??1 1 0SH&I&U &biA fiy* • Ani?y 
f-2 0 fcit$^g3 0 fc y -fey hgg2 0 OfC, 9Uy 
7 120 &m$>lT?>o ?ny V\\0 kVny 9120 

nm&Wctfm— r% ffitfatfi so 0 -fAA/A 0 

[0 0 3 0] y ir-y hgg2 0 0f4, fiy*-/nt 
yf"2 0^-v^^? . /ptyfl 0 ±9 t> % (0. 5 + 
n) ?py?f>f^ (n«0«±coSm) jftHTftft 3 50 
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ota^j-rsy-fey mi A2 1 otsu • 7° 

ntyt2 0(C(il7jA2> yiry M&A2 2 OA (0. 
5 + n) ? P y^fA AAcAlfcAA 
[0 0 3 1 ] Jtt£gg3 OtA • An-feylM 0 

cottA£-c pu^ 1 5 <t ^gft la ^yftotp^ 

y h4 Otc^ffASi i AA g{fLfc^*** • Anir 
ylM 0COti}7j£r (0. 5 + n) 9 n y 9 C 
PU/^ 2 5 <t t^SfHLfc^o: y # • An-feyTA 0 CO 

tlSTjiAtKAA fc&ofd§3\ Jfc® 
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[0 0 3 2] ^^-7i-^ 6 0 fi*— StfetWi 
^-3 6 SrgffAS A W7A/^ 7 0^<Dft;/j£#lk 

lt\ aauastecKiiicSEii-rsosrBSih-rsfcfct 

A An-feylM 0, 2 0 fc*frLT»$tW«J&*fc3&£ 
t5„ A^tyflO, 2 0 f*»$#J 0 &#.&gff A5 
BB&SriH£fT LTI^^colgH^KAA 
[0 0 3 3] -A, T'Ptyf 10, 20 ^SffffilJ t ft 
Jfctfcg@ 3 0 tiy< * y y h 4 0 CO 

ftTJ^rC PU/^ 3 5 £ <9Sff • Aniryf- 

1 t^H, ^cotfcA*" (0. 5 + n) 9 

py^lS^ttfiy* • An-feyf-2 Ofci^ff A 
So -CDfc&A f xy* • 7°Ptyf2 • 7° 

Ptyfl 0 <9 (0. 5 + n) ^ a y ^HtVTlil# 
A5 tHf, -v^^ • Aniri/f- 1 0 <t f9 (0. 5 + 
n) ^ay^3S*L"C^ i ey#Jftl3.= y H4 0©m^S:S 
ffA5cOT:\ fi?* - ~7°n±yf2 0<DW}j¥<DmMH 
ni£ (0. 5 + n) ?Py^f^^/VCS5 0 

[0034] &mmmfm$Lkm\^mm-t 

5„ ^*d\ n = 0iA, '-fn-Kyf-lOKM 
• 7*at-7t2 0 cOftj^COilMH, 0. 5 
^p-7^t4^/A L-CtftB/IASo 
[0 0 3 5] 12C, ^ a y^gmcO«J^El^AAo 7 
n v9%W 1 0 0 (A 9 n y^^^MWs 101 A^y 
7°. 7PyAl 0 2SrH*.-Ci3«A ?ay?3&£m&l 
0 lt^ti-f^>Wf9Xiy9-^, 7 'J i/A • 7P yAl 
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-try h$eg2 0 OfA U ir y Mi A«£[DS§ 2 0 1 k , 

y-fey Mt^-Sr^ny^ 1 1 oicmm^^^y) vt°- 

7P-A2 0 2, 2 0 3 h y iry hff-^SrO. 5 ^ a 
-7^11^*5110^2 0 4^fiitV^5„ AA 
ff-^-fi^cDTf— h-ey-fey hSrHtt (tA) A * 
h-Cy-fey h£»KAA„ 
[0037] 7 y y A • 7 n y A 2 0 2 "C?A n y ^ 1 1 
0ic|fJ]ffl$*fcy-fey hff A 2 1 OfA • Aair 
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7f~l 0 iCttiA y')y-f- 7ny7'2 0 3^Py 
7 1 1 01Cp?]i$£iA JlM[slEg2 0 4t,tot!)tyb 
ff-^-2 1 OX <9 0. 5^ay^jffSE$*fey*fey Mf-5§- 

2 2 OSrfxy* • 7 c n-fe->'t2 0 {CffiA-f5<, 0. 5 
* n y V (Dmmmm 2 0 4 f± % !)t-^ft^^D'^ 
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y-fej/ Mf-§-2 lO^Py^ll Otc^ffl 

17 

[0 0 3 8] 04 iA JfctfcgHtf>1ft& (EATT?f±, HJfc 
09 1 b ^^-fo H3i0iJ 1 ©Jfctfcge 3 0li, CP 

U/-<7 3 5;5>fe>Sff Lfdf-^SrCPU/^T. 1 5 ic^ff A 
51^-777 32 1^ CPU^ 1 5 7>fH^£SlH 
t5^5'7r3 2 2J: > CPU/^3 5 AbSHf L 
5(C^ff^5^f^i/7r 3 2 3 
A CPU^2 50i^8rSit5Sll^y773 2 
4^^-LTV^o 

[0 0 3 9] £7A CPU/U 1 5/5>fcgff Lfdf-^-Sr 20 
C PU^U 3 5 tCjtff A3j£{b^7 7 7 3 2 6 A CP 

u^^-3 5©{§-§-SrSM"f5S^y7r 3 2 5 $ 

i/<y77 3 2 2T?SfHLfcCPU/'<^ 1 5<£>ff-§-£ 
0. 5^ny^5SJE$*55SJi|l||»3 1 fc % gff-^77 
7 3 2 5AgffL7cCPU/^7 3 ScAf-^O. 
y?mm£l£Z>WM®&3 2£^LT^& 0 «®0S§3 
li3 2tA ilMfftffltrO. 5^py^t'T?A'lct5 
fcfc, Zz^fry n 7 7 1 2 0 Mlnffl-f 5 77A7 3 1 
1 t 3 1 2 Srfflv^rv^o 

[0 0 4 0] £ £>iA gff -77732 5 T'SfH LAC 30 
PU/^7 3 5<Dff-5§-£7 P-7M1 0lcmM£-&% 77 1 
X73 1 5i, gjf /-< -77/3 2 2 "Cgfg LAC P 
7 1 5 7)fH^£-CPU/^7 3 5f'ttiAA3fffS-7 P 7 7 
1 1 0fC^i$£-fr5UvA7 3 1 6 b s CPU/^15 
(At^ACPU/^7 2 5 <D^&Jfc$H~5.fct$fcIIIg&3 3 
It, CPU/^ 1 5©ff-^-tCPU^^.2 5<£>ff-5§-£ 
J:b^HlfS3 3 1 -CJfctM-Sfffc* n 7 7 1 2 0 iC|Rlfig$ 
it§ IxAt.7 3 1 3fc<fct57vA<.7 3 1 4 fc % it$5[HEg 

3 3 1 timtS-ttt-WfkMt^V Uyt 1 2 OiCH 
l^t?.RSS©7^ 77°- 7P-7/3 3 2t> 7 U 7 40 
7". 7P77'3 3 2^ffiAA3^-fM£tmt^-£7-P7 

7 1 1 0iC|^aS§-&57 U 77° • 7P 77°3 3 3 Sr^f L 

[0 0 4 1 ] HJS0J l tct 5 Jt&gg 3 o SA gff 7 

7 7 3 2 2AS1H LfcC PU^T. 1 5 ©ff 1§\ A&A*> 
• 7°n-fe yf 1 OWtHTjff^-Sr, W-7X7311 
t?0. 5fA 7/PjI®£i3r, 73 13 Ir|ld3 L~C 

it3»§3 3 1 (CAAASt fcfcfc, Sff LA-7 7.7 • 
y°n±y^-i 0©|ijAff^£r77A.7 3 l eteitWSfg 

^777 3 2 6^g[feL-CCPU^3 5 (CtijAASo 50 
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• ^atyf 1 0©W^f|CtU 
0. 5 7 n y VWXhX^^x. y% • y°n±y^-2 0<D 
UAit&Si^y77 3 2 4(Cj;i9gjHL, ^7A7 
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W^7 3 1 1 lei 0 7-7fLT. OiTjlf^AJ; <9 h 
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17?tij7j £^5^777 • 7 t otyf2 OCOttiTlff-^B 
tO^ra^SrOic-TSo 77^7 3 1 KDiHtliB^Ab 
f-aLyij • 7 c P-fe7f-2 0©a^fi-^Bf±, ^P77l 
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[0 0 4 8] H6S^ *^S£^ffiicfctt5itKSg^* 
Jffi^l 2 SriS-To 2 <£>JfcRgg 3 0 XIX MM^K 

§rl. 5^py?t>f^ (n=l) tU^5 0 r.co 
fcfe, Sftffi^ll (0 4) t^«(DJl®0g§3 KDW^ 
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[0 0 5 1 ] yx2±y^-\C &oX\X ^Ptyf/^C 
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4) <DJt«Sfi3 0K*tU ^7^3 1 l(aot7 30 
yfLfeCPU/^ 1 SOfflWf-^Srx^-Kbr, T 

K^7$t ftx- 9 5 - 1 Sr*r^rs&Mf - 3 

4 2Sr^^57 f a-KHI»3 4 1 fc, ^tfXf SMtf-3 
4 2 tCPU/<7 1 SOT KW^4fcfiy f — ^fcOfftS 
aSrfcSAND^- h 3 5 1 MJPLTl/^ 0 S 
ff^^^T 3 2 A\C ioTgft LTcC PU/^ 2 5 GDffjlJ 

feS ^ fc Sr^»ff^3 4 4 ^f5f^- KEK 
3 4 3 :(OMf^3 4 4 tCPU/^2 5(07K 
^SfcttT*— * irO»3»»Srfc5AND^- h 3 5 2 40 
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3 1 4icA^^5 0 

[0053] cpu/^isjsivcpu/^ 

2 5^)7Kl/^4fcSf u ^Mtfc5^ faff 
f 3 4 2 if »ft^3 4 4 ttilfi^ i A 
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^tltl^KB, tW^?361 flWv^ 3 13 
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^36 2tt^7^ 3 1 4<Dft;fr£raWLTl^*^ 
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u^* l 5<Dlt^(DMc§i<Dmmm^M&ii, ui?*9 
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^^-St^ofci^ tl/7^36 1 tlVv^ 3 6 
3(Dffi^£3KLT^v^ 3 6 3MA;fiU ^itl-i? 
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-ito^£L7tCPU/^ 1 5<Dft-g-£{fcf£U 1/^7 
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Jiy* • 7°Pt^f 2 0tt»S#J!9i&*K±£gB&W 
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[0 0 6 0] H9t N SUK«04^J;5Jt«8«^»^ 
5^^0Sr^o ifcKSB3 OH, ^n^llO© 
9^f^y^l 1 l^Ctil^^^Tc^^^ • T'nir^iM 0 
(D\tiMt¥rA&, Ui?*9 3 1 1 \C J: Q 0. 5^P7^ 
JMvC^n^ 1 20(D?^?y^l 2 l?5yfU 
?p^^120W5^12 lt?a^j*^5^ais/ 
77 • 7 p Ptyf2 0(DWM^B fc(0^1^M<-r o 
1/^7? 3 11 Otli^ff-^At^^^T/ • 7°n±y^~2 
OOHj^ff^Btt, ^P^^120^)?^5y^l22 
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X\ Ztl^tlWxf 3 1 3 b 3 1 4X7 v^XVcM 
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[0061] ^p^12 0<DsLh±jfi*) 12 3tt 
fi, 7!)y^- 7P -y7°3 3 2 © tftfjtfSfl&JHii 0 4© 
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•So 
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-^^^A-eit 0 1 }r^t"<t 5 tA -7^^ • An+r 
-yf 10> fiy*-7'Ptyt2 0, ^*yfflW-3-^ 
-7h4 0*3 J;Ubbge8B3 0 3r, ^ft-^LCPU^* 1 
5, 2 5, 3 Stio-CSBttb-CVS^ r.c75ffi)ig;(C|5S 

[0 0 6 4] IbKSB 30^^t!) ffflflp^ >y 

h 4 0(DCP\J/<^4 >? — 7 ^- — ^UlCfyMLX, -7 
77 • 7°v±-yfl 0, f-^viJ ' 7°v±-yf2 0b/ 
*Vfflfflzi.~y b4 ^ti^tiCPU^7 1 5, 2 30 

stcio-CSSRb-Cfciv^U lb$egg3 0£A ^y* 

• 7°niryf-2 0©CPU^/f 7g|5S-F*l 

t20, ^^UfljlJW^-- y h4 0£\ ttfjlCPU^ 
715, 2 5 {-ioTggcL'r 
[0 0 6 5] £t±, *HJS?g«tt iSai'fa^^ 
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•feyf-roW^SrJfcR-TS©^ «SS/-f X^lcjEH-rs 40 

[0 0 6 6] )B£l$KTd}A (0. 5 + n) ? 
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At?», "^7^ • An-fei/Al 0c/)Htl7^t^^y fij»a 50 
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2 oicsiff-t-STj^s^sr-rs^s^^^o r^fcfc, 
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1 5bg§c£A, f-oiy* • 7°v±yf2 0 fcJtR 
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(0. 5 + n) ^ny^W^/l/il^ CPU/<7 

2 5 itiSff bfcf-^y* • 7°airyf-2 0(D|±l^tJt 
$i^5o 

[0 0 7 1] *fc, lbi,SS3 0{i. t^VM'M^y 

b 4 • 7°v±yfl O^fDthTJ^C PU^ 

7 1 5 itlSff b, (0. 5 + n) VnytmM^X 

y*'7°Ptyf2 0(1-?^^ • 7°n-tr yf- 1 0 J; (9 
(0. 5 + n) ?ny?WthXMfclTZ>bbh^, ^7 
7 ' 7°n±y^\ 0 i <0 h (0. 5 + n) ^Py^jftil 
T^^!)$iJW^-^y b4 0©tH^/SrSff-f"5©T:\ 
5/^7 • r/n-fe yf-2 0 (Dtif^coiSMfif'fc (0. 5 + 
n) -7^f^^H;45 0 

[0 0 7 2] 01 1 (A *MM]&t&\£#tfZ)ti&&m<D 

mmm imams tw&) z^-r. mmm5\c^.^itm 

^g3 0ti, CPU^i 5©fi-§-Sr£frt"S£f&'*y 
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5^>bSft L±m£r&**yfflm^-~y b 4 oomtim 

23b CPU/^7 2 5(Dtil^f-^^Sff-rSS{f^y 

[0 0 7 3] $felA Sff/^jyT/r 3 2 2 ASff LfcC 
PU/^7 1 5 WfH-^"^ (0. 5 + n) ^P-y^-++^/V 
»Mo54ir5il5ffi[llfS3 1 b C P U/^-X 1 5 Off ^ fc C 
PU/^7 2 5 0OfH^^lbti-r51b$jclI]Sg3 31b CP 
U/<7 1 5cDff^-i:CPU/-<7 2 5(Z)ff^-^J;t:^lHlSS3 

3 l-eit^-rSfffiA 9vy#\ 2 OblWjffl^ii-SUb 
7731 3fe±r53 14b lbK0SS3 3 1x5^71^5 
^-^Wff-^-^^ny^ 12 0tPffl^t5RSS© 
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7 ]) y -f . 7 n y A 3 3 2 b , 7 V y 7° • 7 n y 7° 3 3 
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iM^/McASfc&iA jlffiI@IK3 lSr^ny^ 1 20 
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fll©Jfc«§6E3 Olcfcit3»j£0l83 l tA HJ£$I l 
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Eg 3 2©ffi#©HIBHIMat:^ i 5<> 

[0 0 7 5] Jfctfcgfi 3 0 fA Sff ^ y 7 7 3 2 2 Ag 
iLfeCPU/^ 1 5<Dff-S§-;3W7 7 • r/nirj/f-l 0 
©m^-^-Cffcntf, Sffi LA^-7 7 • 7°airj/f-l 0 
<Dm7AHA£r^vA7 3 1 i -eo. ?/vmM£ 

iA A7jff-§-3 5 3^1 ©^i©AND^ h 3 5 4 

l/vA7 3 1 3&jg*l/CJfctfciai53 3 1 
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77 . 7°v±yf 1 OcDttiTjff-^C PU/U 2 5 (Ctij 
ti£ft,%^£5\£?Z e 20 

[0 0 7 6] &b(A -^77 • y°v±yf-l OcDffiAfH 
%-£.<9 0. 5?nyy-mtlX^%^x-y% • /nt-7f 
2 O^ttiTjfa-^SrSff^'y^r 3 2 4T?Sffbt, A/J 

ff-^-3 5 2^ i tftotl/^AND^- h 3 5 5 W 
^#3 1 4^^S3LTJ:bKll]ES3 3 1 [CA^ASo 
[0 0 7 7] JfcftHlg&3 3 1 tA AA£AA-77 7 • y° 
Ptyf 1 OcDdjjjffAi A^ y# • 7°Dir ; yf-2 0© 

-r&fr**, AA^tifcm^-w^^io-et^-at*^ 30 

fMtttiff -§"£tijAA?> A 7^ yA- 7B?^3 3 2 ft 

?n-^i2 ocD7-f 5 y^Af&affii \C±y V £tlX 
mmmi^m^hmn^ 0 yyy?-yvyy°3 3 3u 

7 y -;y A • 7 p y A 3 3 2 ©ffiTJtr A7 p y 7 1 101: 

mm^x^-mm.\&\t?r3 6 1 Lx^^yp-y 

6 0 t-ObSAi-rSo 
[0 0 7 8] -A, Jfc&gB 3 0 fA Sff ^ -77732 
2 ASfH LAC P U/^7 1 5 <£>{f -§-^7 * U fjjlJP^-=. y 
V 4 0 cDtiJTJff-^AfctUA AND7 1 - h 3 5 4, 3 5 40 
5 (DAAff %r 3 5 3 & 0 1C LTitgttH]^ 3 3 1 ~-<D A7J 

Srwuh-rs ittt, lat- * y -7 h 4 0 

(DtBTjfH-^-SrW^^ 3 1 1 "CO. 5 fA7/VjI2f £ 
it\ jiff 7 r 3 2 3^gftLtCPU^2 5 Sift 

[0 0 7 9] AND^F 3 5 4, 3 5 5 OA7J 

ff-^-3 5 3§ri(cLr, i/'^^ 3 l l tfsatfrf 5;** 
y^ij^n--^ h4 OK>tli^m#^JtKia8S3 3 1 (CA7J 
fSit'MA i|f/<y7 7 3 2 3 [C iotC PU^7 
2 5fcHtt7JlA|5HH^^ Si^y77 3 2 4"Ci?tf£ 50 
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AACPU/<7 1 5AAAAPU/<7 2 5 c7)ff^-c7)^ffi 
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(57)Abstract: 

PROBLEM TO BE SOLVED: To prevent an multiplex 
error and a same error and to surely detect a processor 
error 'by means of the output comparison of duplexed 
processors by delaying the output signal of one 
processor for a fixed time and comparing it with the 
Output signal of the other processor, 
SOLUTION; A comparing device 30 receives the output 
of a master processor 10 from a GPU bus 1:5, transmits 
It to a memory control unit 40, delays the received 
output of the master processor 10 by (0.5+n) clock and 
compares it with the output of a checker processor 20, 
which is received from the CPU bus 25. At the time of 
noncoincldence in a comparison result the comparing 
device 30 outputs a nonooinddenee detecting signal 36 
to a bus interface 60, The bus interface 60 stops the 
output to a system bus 70, prevents the influence of the 
error to another device and generates fault interruption 
as against the processors 10 and 20. Then, the 
processors 10 and 20 execute self-diagnosis so as to 
investigate the cause of error occurrence. 
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CLAIMS 



[Claim(s)] 

[Claim 1] In the processor output comparison approach of comparing the output slgnai of two 
processors which operate with the clock of the same frequency and perform the same data 
processing* and detecting the processing error of the operation of one processor, or an output It is a 
[Q.5*n] clock cycle (here) about actuation of the processor of another side to one processor, n is the 
processor output comparison approach characterized by delaying only fixed time amount Td 
containing the integer of zero or more arbitration thru/or its near range *&t, and delaying only said 
fixed time amount Td and comparing the output signal of one [ said } processor with the output signal 
of the processor of said another side. 

[Giaim 2] Said near range .-**t is the processor output comparison approach made into the range 
where the multiple error generated when the bound is { **0*33 clock cycle or said fixed time amount 
Td ] 0 in claim 1 becomes 1/2 or less, 

[Claim 3] The master processor which performs predetermined data processing, and the checker 
processor which operates with the clock of the same frequency as a master processor, and performs 
said data processing, In the clock equipment which supplies a clock to a master processor and a 
checker processor, the comparison equipment which receives and compares the output signal of a 
master processor and a checker processor, and a computer system equipped with a shared resource 
A master processor and said comparison equipment a master-processor bus, and a checker 
processor and said comparison equipment A checker processor bus, Said comparison equipment and 
said shared resource are connected by the 3rd bus, respectively. Said clock equipment It has the 
clock delay circuit to which only fixed time amount including a [Q*5+n] clock cycle (n is the integer of 
gero or more arbitration) thru/or its near range is late, and supplies the clock to a checker processor 
to the clock supplied to a master processor Said comparison equipment The 1st delay circuit where 
only said fixed time amount is delayed tn the output signal of the master processor which received 
from said master-processor bus, The comparator circuit which compares the output signal of the 
master processor for which only said fixed time amount was delayed with the output signal of the 
checker processor which received from said checker processor bus, When outputting the output 
signal of said shared resource which received from said 3rd bus to the both sides of said master- 
processor bus and said checker processor bus The computer system characterized by having the 2nd 
delay circuit where only said fixed time amount delays the output to said checker processor bus. 
[Claim 4] The master processor which performs predetermined data processing/ and the checker 
processor which operates with the clock of the same frequency as a master processor, and performs 
said data processing, In the clock equipment which supplies a clock to a master processor and a 
checker processor, the comparison equipment which receives and compares the output signal of a 
master processor and a checker processor, and a computer system equipped with a shared resource 
A master processor, said shared resource, and said comparison equipment A master-processor bus, A 
checker processor and said comparison equipment are connected by the checker processor bus, 
respectively. Said clock equipment It has the clock delay circuit to which only fixed time amount 
including a [Q.5+n] clock cycle (n is the integer of zero or more arbitration) thru/or its near range is, 
late, and supplies the clock to a checker processor to the clock supplied to a master processor. Said 
comparison equipment The signal delay circuit where only said fixed time amount delays the signal 
received from said master-processor bus, The comparator circuit which compares the output signal of 
a checker processor with the output signal of a master processor with which only said fixed time 



amount was delayed, The computer system characterized by having the selection circuitry outputted 
to said checker processor bus when the output signal of said signal, delay 'circuit is -an output signal of 
said shared resource; 

[Claim 5] A computer system equipped with the reset equipment which outputs the 1st reset signal 
which cancels reset of a master processor, and the 2nd reset signal which only sard fixed time amount 
is delayed for this 1st reset signal, and cancels reset of a checker processor in claims 3 or 4 
[Claim 6] It is the computer system characterized by to equip the output signal of a master processor 
and a checker processor with the bus supervisory circuit which checks that said comparison 
equipment has effective address signal or data signal which supervised the received control signal and 
was received, and notifies a valid signal to said comparator circuit in claim 3 4 or 4 or 5 including an 
address signal, a data signal, and a control signal, and for said comparator circuit to compare an 
address signal or a data signal only when the notice of said valid signalis received from said bus 
supervisory circuit 

[Claim 73 In claim 3 thru/or any 1 term of 6 said comparison equipment The 1st register which stores 
the output Signal of the master processor which received from said master-processor bus, It has the 
2nd register which stores the output signal of the checker processor which received from said 
checker processor bus, The computer system characterized by holding the output signal of a master 
processor and the output signal of a checker processor which the inequality produced to the 1st 
register and the 2nd register, respectively when said comparator circuit detects an inequality. 
[Claim 8] It is the computer system wh i ch controls the output signal of the master proce ssor which 
controlled said bus interface and the inequality produced when said comparator circuit detects an 
inequality including, the I/O device connected to said memory control unit through the memory control 
unit with which said shared resource controls access of said master processor in claim 3 thru/or any 
1 term of 7 t memory, and a bus interface and a system bus. 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] Especially this invention relates to the comparison method of a processor 

output about a computer system* 

[0002] 

[Description of the Prior Art] In order for a computer system to continue normal actuation, data 
transfer between components needs to be performed correctly. By data transfer bus, when based on 
fracture or the short circuit of a signal line, of course, by the mutual electromagnetic effect of two or 
more signal fines, and the reflected wave on a signal line, a noise may occur and an error may be 
produced in data transfer Moreover, also in the interior of a component, the error of processing is 
sometimes further produced [ the exposure of a power-source noise, alpha rays, etc, and ] by 
degradation of the component itself etc, 

[0003] It is ;■** to interpret it as right data and to oarty out Inaccurate processing to these mistaken 
transfer data and processing results, in a computer system. For this reason, the improvement in 
dependability of a system is aimed at by various methods, such as doubleness of an important 
component, and a monitor of unjust signal CHI by the parity check. 

[0004] For example, the processor output comparison method which performs the same data 
processing for the doubled processor to coincidence with the same clock, measures two processor 
outputs, and detects one operation error and output error of a processor is learned widely. 
[0005] Only a master processor outputs the result of an. operation, and while a checker processor 
inputs the result of an operation into an output comparator circuit, the output of a master processor 
is received and it inputs Into an output comparator circuit, and the approach of comparing both result 
of an operation is indicated by "Functional redundancy checking" currently introduced by "Fault 
Tolerance Achieved in VLSI*" of a reference ""IEEE MICRO December 1984" magazine. 
[0006] By the way, since delay will arise by the time the output of a master processor is inputted into 
the output comparator circuit of a checker processor, difficulty is in enlarging a clock frequency and 
making high-speed operation perform* In order to solve this problem, one clock cycle or the method of 
processing two or more integer clock cycle operations is learned rather than the master 

processor in the checker processor. 

[0007] The method of only the integer clock cycle of one or more clock cycles delaying it, if only the 
integer clock cycle of one or more clock cycles delays a checker processor rather than a master 
processor in JP J 58-1S756A start, only the integer clock cycle of one or more clock cycles delays the 
input to a checker processor rather than a master processor further, it inputs and a checker 
processor receives the result of an operation from a master processor, and inputting into an output 
comparator circuit, and performing the comparison with the self result of an operation is indicated 
[0008] 

[Problem(s) to be Solved by the Invention] The above-mentioned output comparison method of the 
conventional doubleness processor can detect the error generated in the interior of one processor, or 
the output path of SESSA, However, when two processors output the result of an operation which 
mistook both, the error cannot be detected effectively, 

[0009] For example, since the power-source line and grand line of a doubleness processor serve as 
reference voltage of all signals, if thfc electrical potential difference of a power-source line changes 
with power-source noises, at both the processors that are operating with the same clock the logical 



value of the signal inside a processor wifl change unfairly to the same timing. If this coincidence error 
occurs* the error of processing cannot be detected but normal processing may not no longer be 
guaranteed. Furthermore, since it goes on as normal data processing in being the same error whose 
result of the mistaken processing corresponds, a possibility of causing serious accident also has the 
result 

[0010] An example of malfunction of a doubleness processor is shown in drawing 1 5 . A processor 
transmits a signal to the timing of the standup of a clock using storage elements, such as a flip-flop 
and a latch, and performs an operation. Clock A is a clock of a master processor of operation, and 
Clock 6 is a clock of a checker processor of operation. 

[001 j] Since the error of logical operation will be produced in both a master processor and a checker 
processor if the standup of Clocks A and 8 and generating (slash section) of a power-source noise 
lap when Clock A and Clock 8 are phase contrast 0 as shown in this drawing (aX a coincidence error 
(a multiple error and the same error) is nonavoidable with a processor comparison method. 
[0012] About the coincidence error of a doubteness processor, a part of this invention persons' latest 
experimental result is shown in drawing 16 . This example repeats and pours in an input power noise 
during processor actuation, and measures the same error as the multiple error of the output of a 
processor It is an error Incidence rate [ in / the axis of abscissa of a graph, and / in an axis of 
ordinate / the output frequency of fixed time amount ]* and the same error (thick wire) as a multiple 
error (thin Sine) is shown- [ the time delay (the unit of time amount is a clock cycle) of 
interprooessor ] The same error is a part of multiple error, 

[001 3] When the time delays of two processors of operation are 0 and an integer dock cycle so that 
clearly from this example of an experiment (Le. f when the phase contrast of the clock of two 
processors of operation is 0), the incidence rate of a multiple error serves as a peak. The same error 
also shows the same inclination by the small period of a time delay. In addition, when naming 
generieaUy the same error as a multiple error, below, tt will be called a coincidence error, 
[0014] As mentioned above, since the conventional doubleness processor output comparison method 
is operating the master and the checker with the clock in phase, a coincidence error occurs in both 
processors and it has the trouble which produces the leakage in detection of the processing error in 
data processing and output processing of a processor For this reason, there is a danger of causing 
the msyor accident of the system by the inaccurate result 

[0015] The purpose of this invention conquers the trouble of the conventional technique, and Is to 
offer the processor output comparison method which can prevent the coincidence error of a 
doubleness processor, and the computer system which applied it. 
[0016] 

[Means for Solving the Problem] This invention is making phase contrast of the clock of a doubleness 
processor of operation into 180 degrees thru/or the near rangm of those, was made paying attention 
to the ability to reduce generating of a coincidence error sharply, and a part of invention of Japanese 
Patent Application No. No, (1994 12,16) 313492 [ six to 3 which this invention persons proposed 
previously is improved further, and it develops it 

[0017] In the processor output comparison approach of the above-mentioned purpose comparing the 
output signal of two processors which operate with the clock of the same frequency and perform the 
same data processing, and detecting the processing error of the operation of one processor or an 
output It is a [0.54n] clock cycle (here) about actuation of the processor of another side to one 
processor Only fixed time amount Td containing the integer of zero or mora arbitration thru/or its 
near range is delayed, and n is attained by delaying only said fixed time amount Td and comparing 
the output signal of one [ said ] processor with the output signal of the processor of said another 
side. 

[0018] Said near range **t is taken as the range where the multiple error generated when the bound 
is [ **0; 33 clock cycle or said fixed time amount Td 3 Q becomes 1/2 or less, 

[001 9] In the above-mentioned experimental result ( drawing 16 X the incidence rate of a coincidence 
error falls as the phase contrast of the clock of two processors of operation becomes larger than 0, 
and the time delay of two processors of operation serves as min by 0.5 clock cycles. The same is said 
of 1.5 clock cycles. That is, when the phase contrast of the clock of two processors of operation is 
180 degrees, the incidence rate of a coincidence error serves as min. Furthermore, if a time delay of 
operation is within the limits of the range of 0.1.7 clock cycles - 0,83 clock cy cle, 1,17 clock cycles ~ 



1.83 clock cycle, compared with the time of the conventional phase contest 0, 1/2 or less will be the 
incidence rate of a coincidence error. 

[00203 Moreover, the master processor to which the above-mentioned purpose performs 
predetermined data processing, The checker processor which operates with the clock of the same 
frequency as a master processor, and performs said data processing, In the clock equipment which 
supplies a clock to a master processor and a checker processor, the comparison .equipment which 
receives and compares the output signal of a master processor and a checker processor, and a 
computer system equipped with a shared resource A master processor and said comparison 
equipment a master-processor bus, and a checker processor and said comparison equipment A 
checker processor bus. Said comparison equipment and said shared resource are connected by the 
3rd bus, respectively. Said clock equipment It has the clock delay circuit to which only fixed time 
amount including a [0.5+n] dock cycle (n is the integer of zero or more arbitration) thru/or its near 
range is fate, and supplies the clock to a checker processor to the clock supplied to a master 
processor. Said comparison equipment The 1st delay circuit where only said fixed time amount is 
delayed in the output signal of the master processor which received from said master-processor bus, 
The comparator circuit which compares the output signal of the master processor for which only said 
fixed time amount was delayed with the output signal of the checker processor which recei ved from 
said checker processor bus, When outputting the output signal of said shared resource which received 
from said 3rd bus to the both sides of said roaster-processor bus and said checker processor bus, ft 
is attained by having the 2nd delay circuit where only said fixed time amount delays the output to said 
checker processor bus. 

[0021] A master processor, said shared resource, and said comparison equipment Or a master- 
processor bus* A checker processor and said comparison equipment are connected by the checker 
processor bus, respectively. Said comparison equipment The signal delay circuit where only said fixed 
time amount delays the signal received from said master-processor bus. It is attained by having the 
comparator circuit which compares the output signal of a checker processor with the output signal of 
a master processor with which only said fixed time amount was delayed, and the selection circuitry 
outpufcted to said checker processor bus when the output signal of said signal delay circuit is an 
output signal of said shared resource. 

[0022] Said computer system is equipped with the reset equipment which outputs the 1st reset signal 
which cancels reset of a master processor, and the 2nd reset signal which only said fixed time amount 
is delayed for this 1st reset signal, and cancels reset of a checker processor. Thereby, as for 
actuation of a checker processor, only said fixed time amount is always delayed, 
[0023] The output signal of a master processor and a checker processor is equipped with the bus 
supervisory circuit which checks that said comparison equipment has effective address signal or data 
signal which supervised the received control signal and was received, and notifies a valid signal to said 
comparator circuit including an address signal, a data signal and a control signal, and said comparator 
circuit compares an address signal or a data signal, only when the notice of said valid signal is 
received from said bus supervisory circuit. 

[0024] The above-mentioned control signals are AS signal and a R/W signal Thereby, the address or 
data of a roaster-processor bus or a checker processor bus avoids the error detection in the 
comparison equipment by the CPU bus error generated at the period which is not effective, and 
prevents suspending actuation of a system superfluously* 

[0025] Said comparison equipment holds the output signal of a master processor and the output 
signal of a checker processor which the inequality produced to the 1st register and the 2nd register, 
respectively, when it has the 1st register which stores the output signal of the master processor 
which received from said master-processor bus, and the 2nd register which stores the output signal 
of the checker processor which received from said checker processor bus and said comparator circuit 
detects an inequality. This uses for cause investigation of an error 

E0O263 When said comparator circuit detects an inequality including the I/O device connected to said 
memory control unit through the memory control unit which controls access of said master processor, 
memory, and a bus interface and a system bus, said shared resource controls said bus interface, and 
controls the output signal of the master processor which the inequality produced. This avoids the 
danger of producing the major accident of a system. 
[00273 



[Embodiment of the Invention] 

[Operation gestait 13 The block diagram of the computer system by the operation gestaft 1 of this 
Invention is shown in drawing 1 , The master processor 10 and the checker processor 20 to which this 
computer system performs predetermined data processing, Access to I/O devices 80 and 90, memory 
50, end memory 50 from a master processor 10 or I/O devices 80 and 90, And the memory control 
unit 40 which controls access to I/O devices SO and BO from a master processor 10 (MOUX The 
comparison equipment 30 which measures the output of a master processor 10, and the output of the 
checker processor 20, and detects an error, It has the system bus 70 which connects I/O devices 80 
and 90, and the bus interface (bus I/F) 80 which connects a system bus 70 with a memory control 
unit 40. 

[0028] Furthermore, it has processors 10 and 20, the clock equipment TOO which supplies a clock to 
comparison equipment 30, and reset equipment 200 which resets processors 10 and 20, and a master 
processor 10 and comparison equipment 30 are connected by the CPU bus 15, the checker processor 
20 and comparison equipment 30 are connected by the CPU bus 25, and comparison equipment 30 
and a memory control unit 40 are connected by the CPU bus 35. 

[0029] Hereafter, actuation of the computer system by this example is explained Clock equipment 
100 supplies a dock 1 10 to a master processor 10, comparison equipment 30, and reset equipment 
200, and supplies a clock 120 to the checker processor 20, comparison equipment 30, and reset 
equipment 200 further. A clock 110 and a clock 120 have the same frequency; and ISO degrees of 
phases have shifted. 

[0030] Only a clock cycle (0,5*n) delays the reset signal 220 outputted to the checker processor 20 
to the reset signal 210 outputted to a master processor 10 at the time of starting of a system so that 
reset equipment 200 may cfock* , cycle(0.5-^n) (n is zero or more integers )-he behind [ a master 
processor 10 ] in the checker processor 20 and may operate. 

[0031] Comparison equipment 30 carries out clock (0.5*n) delay of the output of the master 
processor 10 which received, and is compared with the output of the checker processor 20 which 
received from the CPU bus 25 while receiving the output of a master processor 10 from the CPU bus 
1 5 and transmitting to a memory control unit 40. When a comparison result becomes an inequality, 
comparison equipment 30 outputs the inequality detecting signai 38 to a bus interface 6Q, In addition, 
the output of a processor consists of the address, data, and a control signal, 

[0032] if the inequality detecting signai 36 is received, a bus interface 60 suspends the output to a 
system bus 70, and it wiSi generate failure interruption to processors 10 and 20 while it prevents that 
an error affects other equipments, If failure interruption is received, processors 10 and 20 will perform 
a self-test and will study the cause of error generating* 

[0033] On the other hand, in the processing to which processors 10 and 20 serve as a receiving side, 
comparison equipment 30 carries out dock (0.5+n) delay of the output, and is transmitted to the 
checker processor 20 at the same time it receives the output of a memory control unit 40 from the 
CPU bus 35 and transmits to a master processor 10. For this reason, since it receives the output of 
the clock (0.5+n) memory control unit 40 from a master processor 10 whiie carrying out clock 

(0.5+n) delay of the checker processor 20 rather than a master processor TO, delay of 

actuation of the checker processor 20 always (G,5*n) becomes a clock cycle, 

[0034] Next, the detailed configuration and actuation of each part are explained. In addition, delay of 
actuation of the checker processor 20 to a master processor 10 is explained as 0.5 clock cycles as n~ 
CL 

[0035] The block diagram of clock equipment is shown in drawing 2 « Clock equipment 100 is equipped 
with the clock generation circuit 101 and the flip-flop 1 02, while carrying out dividing of the frequency 
to one half with the fiipHlop 102, about 180 degrees of phases shifted mutually the basic clock which 
the clock generation circuit 101 outputs, namely, it outputs the clock signal 1 10,120 of two 0,5 clock 

[0036] The block diagram of reset equipment is shown in dnawn^3 . Reset equipment 200 is equipped 
with the reset signal generating circuit 201, the flipHlop 202,203 which synchronizes a reset signal 
with a dock 110, and the delay circuit 204 which deSays 0.5 docks of reset signals, A reset signal 
starts reset by the assertion (set), and cancels reset by negation. 

[0037] The reset signal 210 synchronized with the clock 1 1 0 with the flip-flop 202 is outputted to a 
master processor 1 0, is synchronised with a dock 110 with a flip-flop 203, and outputs the reset 



signal 220 delayed from the resfct signal 210 QJ5 clocks by the delay circuit 204 to the checker 
processor 20* The delay circuit 204 of 0,5 clocks is realizable with the flip-flop 205 which 
synchronizes a reset signal with a clock 120. In addition, what is necessary is just to connect to a n 
piece serial the fllpHFlop which synchronizes a reset signal 210 before a flip— flop 205 or with back on a 
clock 1 10, when setting a time delay as a clock {0.5*nX 

[0038] The configuration {below, it is called an example 1 ) of comparison equipment is shown in 
drawing 4 , The comparison equipment 30 of an example 1 has the transmission buffer 321 which 
transmits the signal received from the CPU bus 35 to the CPU bus 15, the receive buffer 322 which 
receives the signal of the GPU bus 15, the transmission buffer 323 which transmits the signal 
received from the CPU bus 35 to the CPU bus 25, and the receive buffer 324 which receives the 
signal of the CPU bus 25, 

[0039] Moreover, it has the transmission buffer 326 which transmits the signa! received from the CPU 
bus 15 to the CPU bus 35, the receive buffer 325 which receives ths signal of the CPU bus 35, the 
delay circuit 31 which delays 0,5 clocks of signals of the CPU bus 15 received by the receive buffer 
322, and the delay circuit 32 which delays 0.5 clocks of signals of the GPU bus 35 received by the 
receive buffer 325. The registers 31 1 and 312 which synchronise with a dock 1 20, respectively are 
used for delay circuits 31 and 32 in order to make a time delay 0.5 clock cycles. 
[0040] Furthermore, the register 315 which synchronises with a clock 110 the signal of the CPU bus 
35 received by the receive buffer 325, The register 316 synchronized with a ciook 110 before 
outputting the signal of the GPU bus 15 received by the receive buffer 322 to the CPU bus 35, The 
comparator circuit 331 which compares the signal of the CPU bus 15 with the signal of the CPU bus 
25, The register 313 and register 314 which are synchronized with a clock 1 20 before comparing the 
signal of the CPU bus 15 with the signal of the GPU bus 25 in a comparator circuit 331, ft has the 
flip-flop 332 of RS mold which synchronizes with a clock 120 the inequality detecting signal which a 
comparator circuit 331 outputs, and the flip-flop 333 which synchronizes with a clock 1 10 the 
inequality detecting signal which a flip-flop 332 outputs, 

[0041] The comparison equipment 30 by the example 1 outputs the output signal of the master 
processor 10 which received to the CPU bus 35 via a register 318 and a transmission buffer 328 while 
0.5 cycles of signals of the CPU bus 15 received by the receive buffer 322, te., the output signal of a 
master processor TO, is delayed with a register 311 and it inputs it into a comparator circuit 331 via a 
register 313. Furthermore, to the output signal of a master processor 10, a receive buffer 324 
receives and the output signal of the 0.5 clock delay checker processor 20 is inputted into a 

comparator circuit 331 via a register 314* 

[0Q42] A comparator circuit 331 takes the OR of the comparison result of all signals as compared 
with each for every signal which corresponds the output signal of a master processor 10 and the 
output signal of the checker processor 20 which were inputted, and generates an inequality detecting 
signal. That is, if at least one of the inputted signals becomes an inequality, an inequality detecting 
signal will be generated* 

[0043] If a comparator circuit 331 outputs an inequality detecting signal a flip-flop 332 will be set to a 
logical value 1 to the timing of a clock 1 20, and will continue outputting a Sogicaf value 1. 
Consequently, a fiip-fiop 333 synchronizes the output of a flip-flop 332 with a clock 110, and is 
outputted to a bus interface 60 as inequality 38> 

[0044] Moreover, comparison equipment 30 is delayed with a register 312 0.5 clock cycles, and is 
outputted to the CPU bus 25 through a transmission buffer 323 while it synchronizes with a clock 110 
the signal of the CPU bus 35 received by the receive buffer 325, i.e. the output signal of a memory 
control unit 40, with a register 315 and outputting it to the CPU bus 15 via a transmission buffer 321. 
[0045] In addition, while receiving again by the receive buffer 322 and inputting into a comparator 
circuit 331 the output signal of the memory control unit 40 outputted to the CPU bus 15 by register 
31 1 and register 313 course by the transmission buffer 321 The output signal (0,5 clock delay) of the 
memory control unit 40 outputted to the CPU bus 25 by the transmission buffer 323 By receiving 
again by the receive buffer 324, inputting into a comparator circuit 331 by register 314 course, and 
comparing both You may make it check the soundness of transmission buffers 321 and 323, receive 
buffers 322 and 324, registers 311 and 312, 313 and 3 1 4, and the CPU buses 15 and25, 
[0046] The timing chart of the comparison equipment by the example 1 of operation is shown in 
Jawing 5 , Comparison equipment 30 sets to 0 time difference with the output signal B of the 



checker processor 20 which latches the output signal A of the master processor 10 outputted to the 
timing 111 of a clock 110 with a register 31 1 to the timing 121 of a clock 120, and is outputted from 
an output signal A to the timing 121 of the 0,5 clock clock 120. The output signal A of a 

register 31 1 and the output signal B of the checker processor 20 are the timing 122 of a clock 1 20, 
they are latched with registers 313 and 314, are inputted into a comparator circuit 331. and compare 
both. 

[0047] When the inequality of an output signal A arid an output signal 8 is detected, an inequality 
detecting signal is outputted, and a comparator circuit 331 sets a flip-flop 332 to a logical vafue 1 to 
timing 123, further, with a flip-flop 333, it latches the output of a flip-fiop 332 to the timing 1 12 of a 
clock 110, and outputs it as an inequality detecting signal 38. 

[0048] The example 2 of the comparison equipment in this operation gestalt is shown in drawl ng 6 , 
The time delay is made into 1,5 clock cycles (n~ 1) with the comparison equipment 30 of an example 
2. For this reason, the register 31 7 which synchronizes with the register 31 1 of the same delay circuit 
31 as an example 1 ( drawing 4 ) at a clock 1 10 is added to the serial. Moreover, the register 318 
which synchronizes with the register 312 of a delay circuit 32 at a clock 110 is added to the serial 
[0049] Thus, the time delay = (0 J*n) clock cycle of the checker processor 20 to a master processor 
10 can be set as arbitration by connecting to n serials the register which synchronizes a clock 110 
with a delay circuit 31 and a delay circuit 32. 

[0050] The comparison equipment by the example 3 is shown in drawin g 7 . With the comparison 
equipment 30 of an example 3/ the address of the CPU bus 15 and the CPU bus 25 or the comparison 
of data is performed, onfy when the address or data is effective* 

[0051] While not outputting the address or data effective in a processor bus depending on a 
processor, the address or data may become an indeterminate. If the output of this **** processor is 
always measured, although a processor is normal, the unfixed address or data will be compared and an 
inequality will be detected. 

[0052] For this reason, comparison equipment 30 decoded the control signal of the CPU bus 15 
latched with the register 31 1 to the comparison equipment 30 of an example 1 ( ^awing.4 X and has 
added the AND gate 351 which takes the AND of the decoding circuit 341 which generates the valid 
signal 342 which shows that the address or data Is effective, and the address of this valid signal 342 
and the CPU bus 15 or data. Moreover, the control signal of the CPU bus 25 received by the receive 
buffer 324 was decoded, and the AND gate 352 which takes the AND of the decoding circuit 343 
which generates the valid signal 344 which shows that the address or data is effective, and the 
address of this vaiid signal 344 and the CPU bus 25 or data is added. In addition, the output of the 
AND gate 351 is inputted into a register 313, and the output of the AND gate 352 m Inputted into a 
register 314. 

[0053] Here, when the address or data of the GPU bus 15 and the CPU bus 25 is effective, since, as 
for a valid signal 342 and a vaiid signal 344, a logical value is set to 1, the comparison of the address 
according [ the output of the AND gate 351,352 ] to a comparator circuit 331 respectively in 
accordance With the logica! value of the address or data or data is performed, 
[0054] On the contrary, when the address or data of the CPU bus 15 and the CPU bus 25 is not 
effective, since, as for valid signals 342 and 344, a logical value is set to 0, the output of the AND 
gates 351 and 352 serves as a logical val ue 0 regardless of the address or data, and the comparison 
of the address by the comparator circuit 331 or data is not performed. Thereby, incorrect detection of 
the error of a processor can be prevented, 

[0055] The example 4 of comparison equipment is shown in drawing 8 . With the comparison 
equipment 30 of an example 4, the condition of the signal of the CPU bus 1 5 by which the inequality 
was detected, and the CPU bus 25 is held, 

[0056] For this reason, the register 363 for comparison equipment 30 to hold the signal of the CPU 
bus 15 which a register 313 outputs to the comparison equipment 30 of an example 1 ( Rawing. 4 ) 
synchronizing with a clock 1 20, The register 384 for holding the signal of the CPU bus 25 which a 
register 314 outputs synchronizing with a clock 120, The selector 361 which chooses the output of a 
register 31 3 or the output of a register 363, and is inputted into a register 383, and the selector 362 
which chooses the output of a register 31 4 or the output of a register 384, and is inputted into a 
register 384 are added, 

[0057] White the logical value of the output of 0 [15 1 La., a CPU bus, and the CPU bus 25 of the 



output of a flip-flop 332 corresponds, a. selector 361 chooses the output of a register 313, inputs it 
into a register 363* and similarly, a selector 382 chooses the output, of a register 314 and it inputs it 
into a register 383* Therefore, a register 383 is updated by the newest togical value of the signal of 
the CPU bus 15, and a register 364 is updated by the newest logical value of the signal of the CPU 
bus 25. 

[0058] When the output of 1 [15 ], le, f a CPU bus, and the CPU bus 25 becomes I the logical value of 
the output of a flip-flop 332 3 an inequality, a selector 361 chooses the output of a register 383; 
inputs it into a register 383, and similarly, a seieotor 362 chooses the output of a register 384 and it 
inputs It into a register 383, Therefore, a register 363 holds the signal of the CPU bus 15 which the 
inequality generated, and a register 364 holds the signal of the CPU bus 25 whioh the inequality 
generated, 

[0059] Thereby, in the self-test by failure interruption, a master processor 10 and the checker 
processor 20 are beginning to read a register 383 and a register 384, respectively, and can specify the 
cause of error generating. 

[0080] The timing chart of the comparison equipment by the example 4 of operation is shown in 
drawmg.9 . Comparison equipment 30 abolishes time difference with the output signal B of the 
checker processor 20 which latches the output signai A of the master processor 10 outputted to the 
timing 111 of a clock 1 1 0 to the timing 1 21 of the 0.5 clock *M**^* c | oc k 1 20 with a register 31 1, and 
is outputted to the timing 121 of a clock 120, The output signal A of a register 31 1 and the output 
signal B of the checker processor 20 are the timing 122 of a dock 120, they are latc hed with registers 
313 and 314, respectively, are inputted into a comparator circuit 331, and compare both. 
[0081] Since the output of a flip-flop 332 is a logical value 0, a selector 381 outputs the output signal 
A of a register 31 3 f and a selector 362 outputs the output signal B of a register 314 for the standup 
123 of a clock 120. For this reason, a register 363 latches the output signal A of a register 313 to the 
timing 123 of a clock 120, and a register 384 fetches the output signal B of a register 314 to the 
timing 123 of a clock 120 similarly, 

[0082] Since a flip-flop 332 latches the inequality detecting signal outputted from a comparator circuit 
331 to timing 123 and it continues outputting a logical value 1 when the inequality of an output signai 
A and an output signa! B is detected, after the standup 124 of a clock 120, a selector 381 outputs the 
output signal (A) of a register 363, and a selector 362 outputs the output signal (B) of a register 364, 
For this reason, an output signal A wtl! be held a register 383 and an output signal B will be held a 
register364. 

[0063] in addition, although a master processor 10, the checker processor 20, a memory control unit 
40, and comparison equipment 30 are connected by CPU bus 15, 25, and 35 in the computer system 
by the operation gestatt 1 of this invention, respectively as shown in Rawing;!, it is not limited to 
this configuration* 

[0084] For example, comparison equipment 30 is built in the CPU bus interface section of a memory 
control unit 40, a memory control unit 40 may be connected with a master processor 10 and the 
checker processor 20 by CPU bus 15 and 25, respectively, comparison equipment 30 may be built in 
the CPU bus interface section of the checker processor 20, and a master processor 10, the checker 
processor 20, and a memory control unit 40 may be connected by GPU bus 15 and 25, respectively. 
[0085] As mentioned above, in the computer system by this operation gestalt, since the coincidence 
incorrect bail of both the processors that origi natein a power-source noise etc, since only Td~ 
(0.5+n) clock cycle delays the actuation by the side of the checker of the doubled processor, only Td 
delays the output of a master side with comparison equipment and the output of both processors is 
measured can be reduced to about 0, the error detection by the output comparison of a doubieness 
processor can be detected certainly, and the dependability of a system can be improved 
[0086] Moreover, it is possible to give the near range of a clock cycle (0.5*ri) to a time delay Td. 
incidentally — the near range — then (**0.33 clock cycle), compared with the case of the former 
without a time delay, generating of a coincidence error can be about reduced below in one half 
[0067] Furthermore, in the computer system of this operation gestait* since the output of a master 
processor 10 and the output of a memory control unit 40 are inputted into comparison equipment 30 
by bus different, respectively, it is not necessary to choose whether comparison equipment 30 
outputs an input signal to a comparator circuit 331, or it transmits to the checker processor 20. For 
this reason, the configuration and logic of comparison equipment become easy and dependabiSity 



improves, 

[0068] [Operation gestalt 2] Next, the computer system fay the operation gestalt 2 of this invention is 
explained. 

[00893 The block diagram of the computer system by this; operation gestalt is shown in drawing 10 > 
This computer system is fundamentally different from the compy ter system of the operation gestalt 1 
which the point which is carrying out direct continuation of a master processor 10 and the memory 
control unit 40 by CPU bus 15 showed to drawing 1 . For this reason, it can carry out, without access 
to the memory 50 and I/O devices 80 and 90 by the master processor 10 going via comparison 
equipment 30 compared with the system of the operation gestalt 1, 

[0070] The comparison equipment 30 in this system is connected to the GPU bus 1 5, and the checker 
processor 20 and comparison equipment 30 are connected by the CPU bus 25. Therefore, clock cycle 
(0,5*n) delay of the output from a master processor 10 to a memory control unit 40 is received and 
carried out from the GPU bus 15, and it compares with the output of the checker processor 20 which 
received from the CPU bus 25. 

[0071] Moreover, comparison equipment 30 recei ves and carries out clock (0.5*n) delay of the output 
from a memory control unit 40 to a master processor 10 from the CPU bus 15, and is outputted to 
the checker processor 20. For this reason, since it receives the output of the clock (0.5*n) 
memory control unit 40 rather than a master processor 1 0 while carrying out clock (0.5+n) delay 
a f ^ e oh^oker processor 20 rather than a master processor 10, deiay of actuation of the 
checker processor 20 always (OiB-n) becomes a dock cycle. 

[0072] The example (it is called an example 5) of the comparison equipment in this operation gestalt is 
shown in drawing 11 , The comparison equipment 30 by the example 5 has the receive buffer 322 
which receives the signal of the GPU bus I5 f the transmission buffer 323 which will transmit to the 
CPU bus 25 if the signal received from the CPU bus 15 by the receive buffer 322 is an output signal 
of a memory control unit 40, and the receive buffer 324 which receives the output signal of the CPU 
bus 25, 

[0073] Furthermore, the delay circuit 31 which carries out clock cycle (0,5-Hi) delay of the signal of 
the CPU bus 15 received by the receive buffer 322, The comparator circuit 331 which compares the 
signal of the CPU bus 15 with the signaf of the CPU bus 25, The registers 313 and 314 synchronized 
with a clock 120 before comparing the signal of the CPU bus 15 with the signal of the GPU bus 25 tn 
a comparator circuit 331, The flipHlop 332 of RS moid which synchronizes with a dock 120 the 
Inequality detecting signal which a comparator circuit 331 outputs. It has the ffip-ffop 333 which 
synchronizes with a cbck 110 the inequality detecting signal which a : flip-flop 332 outputs, and the 
AND gate 354,355 turned on / turned off with an input signal 353, and is constituted* 
[0074] In this example, in order to make a time delay into 0,5 cbck cycles, the register 31 1 which 
synchronizes a delay circuit 31 with a clock 120 is used, In addition, the delay circuit 31 in the 
comparison equipment 30 of this example serves as the function of both the delay circuit 31 in the 
comparison equipment 30 of an exampfe 1 ( drawing 4 X and the delay circuit 32> 
[0075] While comparison equipment 30 delays 0,5 cycles of output signals of the master processor 10 
which received when the signal of the CPU bus 15 received by the receive buffer 322 was an output 
signal of a master processor 10 with a register 31 1 and an input signal 353 inputs the AND gate 354 
of the condition of 1 into a comparator circuit 331 via a register 31 3, the output signal of the master 
processor 10 which inhibited the transmission buffer 323 and received is made not to be outputted to 
the CPU bus 25, 

[0076] Furthermore, from the output signa! of a master processor 1 0, the output signal of the 03 
ciock delay 3^**** checker processor 20 is received by the receive buffer 324, and the AND gate 355 
where the input signai 352 is 1 is inputted into a comparator circuit 331 via a register 314, 
[0077] A comparator circuit 331 takes the OR of the comparison result of all signals as compared 
with each for every signal which corresponds the output signal of a master processor 10 and the 
output signal of the checker processor 20 which were inputted, and generates an inequality detecting 
signal That is, if at least one of the inputted signals becomes an inequality, an inequality detecting 
signal will be generated. If a comparator circuit 331 outputs an inequality detecting signal, a flip-flop 
332 will be set to a logical value 1 to the timing of a clock 120, and will continue outputting a logical 
value 1 > a fiip-ffop 333 comes out of the output of a flip-flop 332, is synchronized with a cfock 1 10, 
and is outputted to a bus interface 80 as inequality aH^*^^*** 36. 



[0078] On the other hand, comparison equipment 30 delays 0 + 5 cycles of output signals of the 
received memory control unit 40 with a register 311, and is outputted to the GPU bus 25 via a 
transmission buffer 323 while it will set the input signal 353 of the AND gate 354,355 to 0 and wili 
inhibit the input to a comparator circuit 331, rf the signal of the CPU bus 15 received by the receive 
buffer 322 is an output signal of a memory control unit 40* 

[0079] In addition, you may make it check the soundness of a transmission buffer 323, a receive 
buffer 324, registers 313 and 314, and the GPU bus 25 by setting the input signal 353 of the AND gate 
354,355 to 1, receiving again by the receive buffer 324, inputting into a comparator circuit 331 this 
signal outputted to the CPU bus 25, and comparing both by the transmission buffer 323, while 
inputting into a comparator circuit 331 the output signal of the memory control unit 40 which, a 
register 311 outputs- 

[0080] The block diagram of the comparison equipment by the example 6 is shown in drawng. 12 . . The 
comparison equipment 30 of an example 8 has added to the serial the register 31 7 which synchronizes 
with the register 31 1 of the same delay circuit 31 as an example 5 ( drawing 11 ) at a clock 110, in 
order to make a time delay Td into 1.5 clock cycles, 

[0081] Thus, the time delay Tdfc (0.5+n) clock cycle of the checker processor 20 to a master 
processor 10 can be set as arbitration by adding the register which synchronizes a clock 110 with a 
delay circuit 31 to n serials. 

£0082] The block diagram of the comparison equipment by the example 7 is shown in drawing jj The 
comparison male value 30 of an example 7 performs a comparison for the address of the CPU bus 15 
and the GPU bus 25. or the comparison of data, only when they are effective, 
[0083] For this reason* the decoding circuit 341 which generates the valid signal 342 which 
comparison equipment 30 decodes the control signal of the GPU bus 15 latched with the register 311, 
and shows that the address or data is effective. The AND gate 351 which takes the AMD of the valid 
signal 342 and control signal of the GPU bus 15, The decoding circuit 343 which generates the valid 
signal 344 which decodes the control signal of the GPU bus 25 received by the receive buffer 324 f 
and shows that the address or data is effective, The AND gate 352 which takes the AND of the valid 
signal 344 and control signal of the GPU bus 25 is added, the output of the AND gate 351 is inputted 
into a register 313, and the output of the AND gate 352 is inputted into a register 314 
[0084] Here, when the address or data of the GPU bus 15 and the GPU bus 25 is effective, since, as 
for a valid signal 342 and a valid signal 344 t a logical value is set to 1, respectively, the comparison of 
the address according [ the output of the AND gate 351,352 ] to a comparator circuit 331 in 
accordance with the address of a control signal or the logical value of data or data is performed. 
[0085] On the contrary, when the address or data of a control signal of the GPU bus 15 and the CPU 
bus 25 is not effective, since, as for a valid signal 342,344, a logical value is set to 0, the output of the 
AND gate 351,352 serves as a logical value 0, and the comparison of the address by the comparator 
circuit 331 or data is not performed, 

[0088] The block diagram of the comparison equipment by the example 8 is shown in drawing 14 . The 
comparison male value 30 of an example 8 holds the conditio n of the signal of the CPU bus 15 by 
which the inequality was detected, and the CPU bus 25. 

[0087] For this reason/the register 383 for holding the signal of the GPU bus 15 which a register 313 
outputs synchronizing with a clock 120, The register 384 for holding the signal of the CPU bus 25 
which -a register 314 outputs synchronizing with a clock 120, The selector 361 which chooses the 
output of a register 313 or the output of a register 383, and is inputted into a register 363, and the 
selector 382 which chooses the output of a register 314 or the output of a register 364, and is 
inputted into a register 364 are added. 

[00883 While the logical value of the output of 0 [1 5 ], i.e., a GPU bus, and the CPU bus 25 of the ^ 
output of a flip-flop 332 corresponds, a selector 361 chooses the output of a register 313, inputs it 
into a register 363, and similarly, a selector 362 chooses the output of a register 314 and it inputs it 
into a register 363. Therefore, a register 363 is updated by the newest logical value of the signal of 
the CPU bus 15, and a register 364 is updated by the newest logical value of the signal of the CPU 
bus 25. 

[0089] When the output of 1 [15 ], L©-, a CPU bus, and the CPU bus 25 becomes [ the logical value of 
the output of a flip--flop 332 ] an Inequality, a selector 381 chooses the output of a register 363, 
inputs it into a register 383, and similarly, a selector 382 chooses the output of a register 364 and it 



inputs it irrto a register 383. Therefore, a register 363 holds the signal of the CPU bus 15 which the 
inequality generated, and a register 364 holds the signai of the CPU bus 25 which the inequality 
generated. Thereby, in the seff-test by failure interruption, a register 303 and the checker processor 
20 can read a register 364, and a master processor 10 can specify the cause of error generating, 
[0090] According to the computer system by this operation gestaft, among the doubled processors as 
mentioned above, the actuation by the side of a checker (0.5+n) Since only fixed time amount Td of a 
clock cycle thru/or the near range {**Q.33 clock cycle) is delayed, only Td delays the output of a 
master side with comparison equipment and the output of both processors is measured Malfunction of 
the coincidence of both the processors resulting from a power-source noise eta can be reduced 
sharply, and the precision of the error detection by the output comparison of a doubleness processor 
can be improved. 

[0091] Moreover, in the computer system of this operation gestalt, since direct continuation of the 
memory control unit is carried out to the master processor by processor bus, the access time from a 
processor to memory or an I/O device can be shortened, and the procesrabiUty of a system can be 
improved, 
C0092] 

[Effect of the Invention] The master processor which performs predetermined data processing 
according to this invention, While performing data processing using the checker processor to which it 
operates with the clock of the same frequency as a master processor, and only fixed time amount of 
integer clock cycie +0.5 clock cycle of arbitration operates the same data processing later than a 
master processor It stops almost generating a multiple error and the same error by delaying only said 
fixed time amount and comparing the output signal of a master processor with the output signal of a 
checker processor. Thereby, processor error detection by the output comparison of a doubleness 
processor can be performed certainly. 

[0093] Moreover, the incidence rate of a multiple error and the same error can be reduced below in 
one half of the conventional technique by making time amount of delay into the near less than range 
of said fixed time amount, i.e« t **0-33 clock cycles. 
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DESCRIPTION OF DRAWINGS 
[Brief Description of the Drawings] 

LBLfwmcil The block diagram of the computer system by the operation gestafc. 1 of this invention, 
[Drawing 2] The block diagram of clock equipment, 
fe^rita The block diagram of reset equipment. 

[Drawing 4] The block diagram by the example 1 of the comparison equipment concerning this 
invention, 

ffir^ingJO The timing chart of actuation of the comparison equipment by the example 1, 
[Drawing 6] The block diagram of the comparison equipment by the example 2, 
£DrawngJj The block diagram of the comparison equipment by the -.-example 3. 
[Drawing 8] The block diagram of the comparison equipment by the example 4. 
[Drawing 9] The timing chart of actuation of the comparison equipment by the example 4. 
[Drawing 10] The block diagram of the computer system by the operation gestalt 2 of this invention. 
[Drawing 11] The block diagram of the comparison equipment by the example 5. 
[Drawfag 12] The block diagram of the comparison equipment by the example 8. 
lDmwing„i3l The block diagram of the comparison equipment by the example 7 V 
rawing 14] The block diagram of the comparison equipment by the example 8, 
[DrMdMLll] The graph which shows the experimental result of a coincidence error. 
[DmMdkJM The explanatory view showing an example of generating of a coincidence error, 
[Description of Notations] 

10 — A master processor, 20 ~ A checker processor, 15, 25> 35 — - CPU bus, 30 — 31 Comparison 
equipment. 32 ~~ A delay circuit, 31 1 t 312, 31 3, 314, 31 5,316,31 7,318 — Register, 321 ,323,326 — A 
transmission buffer, 322,324,325 — Receive buffer, 331 — A comparator circuit, 332,333 — A flip- 
flop, 341,343 — Decoding circuit 351,352,354,355 ™ The AND gate, 361,362 — Selector, 363,364 ~ 
A register, 36 ™ An inequality detecting signal, 40 ™ Memory control unit, 50 — Memory, 60 A 
bus interface, 70 — System bus, 80 90 [ — A clock, 200 / — Reset equipment, 202,203,205 / — A 
flip-flop, 204 / — A delay circuit, 21 0,220 / — Reset signal ] — - An I/O device, 1 00 — Clock 
equipment, 102 — A flip-flop, 110,120 
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